{"id":"CVE-2025-54508","kind":"vulnerability","aliases":["CVE-2025-54508"],"related":[],"title":"AMD SEV firmware: RMP entry checks let a privileged attacker corrupt data integrity","description":"Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger concurrent modifications to RMP entries without proper synchronization potentially resulting in loss of data integrity.","summary":"AMD's Secure Encrypted Virtualization firmware does not properly validate Reverse Map Table entries, so concurrent modifications can happen without synchronization. A privileged attacker can cause loss of data integrity in protected virtual machines.","severity":"medium","cvss":4.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","confidential-computing","hypervisor","infrastructure","sev"],"not_affected_if":["no-amd-sev"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:23+00:00","triaged_at":"2026-11-10T22:31:06+00:00","updated_at":"2026-11-10T22:31:06+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T22:31:06Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: RMP entry checks let a privileged attacker corrupt data integrity","impact":"medium","summary":"AMD's Secure Encrypted Virtualization firmware does not properly validate Reverse Map Table entries, so concurrent modifications can happen without synchronization. A privileged attacker can cause loss of data integrity in protected virtual machines.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev","confidential-computing","hypervisor"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"privileged attacker corrupts memory integrity in confidential VMs","analyst_note":"Check AMD's security bulletin for CVE-2025-54508 for affected SEV firmware versions and the fixed firmware release.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-amd-sev"],"who_is_affected":"Hosts running AMD EPYC processors with SEV firmware that use confidential virtual machines are the systems in scope. The sources do not name affected firmware versions or the steps to confirm exposure. Teams not running AMD SEV confidential computing can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000696,"input_tokens":4555,"output_tokens":482,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':15A,18A '-54508':16A,19A 'allow':77C 'amd':1A,20B,27B 'attack':10A,50B,80C 'caus':52B 'check':6A 'comput':23B 'concurr':42B,83C 'confidenti':22B 'confidential-comput':21B 'corrupt':11A 'could':76C 'cve':14A,17A 'data':12A,55B,96C 'encrypt':30B,72C 'entri':5A,40B,68C,87C 'firmwar':3A,32B,75C 'happen':45B 'hypervisor':24B 'improp':61C 'infrastructur':25B 'integr':13A,56B,97C 'let':7A 'loss':53B,94C 'machin':60B 'map':38B,65C 'modif':43B,84C 'potenti':91C 'privileg':9A,49B,79C 'proper':35B,89C 'protect':58B 'result':92C 'revers':37B,64C 'rmp':4A,67C,86C 'secur':29B,71C 'sev':2A,26B,74C 'synchron':47B,90C 'tabl':39B,66C 'trigger':82C 'valid':36B,62C 'virtual':31B,59B,73C 'without':46B,88C","nicknames":[],"mitigations":[],"who_affected":"Hosts running AMD EPYC processors with SEV firmware that use confidential virtual machines are the systems in scope. The sources do not name affected firmware versions or the steps to confirm exposure. Teams not running AMD SEV confidential computing can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","confidentialcomputing","hypervisor","infrastructure","medium","sev"],"campaign_type":null,"search_a":"'-2025':15A,18A '-54508':16A,19A 'amd':1A 'attack':10A 'check':6A 'corrupt':11A 'cve':14A,17A 'data':12A 'entri':5A 'firmwar':3A 'integr':13A 'let':7A 'privileg':9A 'rmp':4A 'sev':2A","search_b":"'amd':20B,27B 'attack':50B 'caus':52B 'comput':23B 'concurr':42B 'confidenti':22B 'confidential-comput':21B 'data':55B 'encrypt':30B 'entri':40B 'firmwar':32B 'happen':45B 'hypervisor':24B 'infrastructur':25B 'integr':56B 'loss':53B 'machin':60B 'map':38B 'modif':43B 'privileg':49B 'proper':35B 'protect':58B 'revers':37B 'secur':29B 'sev':26B 'synchron':47B 'tabl':39B 'valid':36B 'virtual':31B,59B 'without':46B","search_c":"'allow':77C 'attack':80C 'concurr':83C 'could':76C 'data':96C 'encrypt':72C 'entri':68C,87C 'firmwar':75C 'improp':61C 'integr':97C 'loss':94C 'map':65C 'modif':84C 'potenti':91C 'privileg':79C 'proper':89C 'result':92C 'revers':64C 'rmp':67C,86C 'secur':71C 'sev':74C 'synchron':90C 'tabl':66C 'trigger':82C 'valid':62C 'virtual':73C 'without':88C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:17:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-54508","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54508","severity":null,"published_at":"2026-11-10T22:17:46+00:00","modified_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:23+00:00","fetched_at":"2026-11-10T22:27:23+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}